While Toggle does not directly process payment card information, our platform is considered part of the "Cardholder Data Environment", and as such we take appropriate technical and organisational security measures in the form of maintaining adherence to PCI DSS standards, to protect against unauthorised or unlawful processing of customer cardholder data.

This includes a yearly external audit from an accredited QSA.

You can find a copy of our latest AoC (Attestation of Compliance) at the link below.

Please note that we are currently engaged with our QSA for the renewal of our AoC under PCI DSS v4.